Secure Boot Implementation from UEFI to Userspace - YPS 2024.12

Learn about secure boot implementation using Linaro Trusted Substrate and Trusted Reference Stack in this 31-minute technical talk from the Yocto Project Summit. Explore how Linaro's Arm SystemReady IR and UEFI-compatible firmware works with TRS components to create a comprehensive secure boot chain. Discover the architecture behind hardware verification of UEFI firmware, kernel verification through Unified Kernel Image binary, and rootfs verification using dm-verity hash. Understand how TPM devices measure firmware components and enable encrypted filesystem creation tied to secure systems. Follow the journey of upstreaming these security solutions to various meta layers including oe-core/poky, meta-arm, meta-security/meta-tpm, and meta-secure-core.